$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/12e2635e-4868-3388-8a9a-db68ab1dcac7.roa File: 12e2635e-4868-3388-8a9a-db68ab1dcac7.roa (raw, json) Hash identifier: eWgPK7NOaLmzyjqqAK+xEWUPlFYYgLI4r2SivNUh6Rw= Subject key identifier: 6D:F6:48:41:AC:3C:CA:E7:B2:91:C7:A6:B3:15:80:4F:29:68:81:0C Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Certificate serial: 010D0C9F4328584A62840D102A6A700723114880 Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/12e2635e-4868-3388-8a9a-db68ab1dcac7.roa Signing time: Wed 02 Jul 2025 12:36:03 +0000 ROA not before: Wed 02 Jul 2025 12:36:03 +0000 ROA not after: Tue 30 Sep 2025 12:36:03 +0000 asID: 20362 IP address blocks: 198.41.0.10/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:84:0d:10:2a:6a:70:07:23:11:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45 Validity Not Before: Jul 2 12:36:03 2025 GMT Not After : Sep 30 12:36:03 2025 GMT Subject: CN=723369cb-2811-4760-82da-3c887b101fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ce:5e:36:42:44:5b:00:0f:2d:e8:7c:63:d5: 2c:0e:93:74:5c:93:d4:88:93:a5:cf:1a:c2:81:bc: 08:9d:3f:56:1f:90:67:86:42:7f:94:a7:36:1f:ef: 6f:45:c6:5d:15:57:8c:18:33:23:bd:4b:56:2c:36: 16:aa:40:c5:29:30:2e:4a:77:bd:8e:a4:e5:c4:c4: 58:1d:32:5b:11:ef:bd:49:84:23:8e:14:80:99:45: 18:b0:0d:3c:77:40:44:ce:2a:14:11:b5:cb:b4:aa: 8c:9c:b2:f2:53:48:7a:04:20:95:72:f7:b4:65:dc: 35:e2:cd:f7:7a:f6:9a:46:71:e4:41:39:64:e6:66: 6f:ce:5f:f0:8b:cd:73:05:88:79:97:7c:5d:e9:a3: a9:88:81:70:b7:3b:86:14:90:dc:f8:5c:2b:be:5f: ef:da:fb:01:88:19:1d:52:e6:f2:00:fd:14:e4:90: b6:ba:e9:d8:4e:8d:25:63:26:6f:bd:6f:27:79:bc: e0:a4:03:e6:f7:2f:11:50:b4:77:42:de:45:3f:b3: 2c:66:81:f9:76:07:c9:b1:24:67:29:c1:f6:8a:6c: 0b:34:36:5a:6d:10:9b:c0:b2:9f:a5:3e:50:89:b8: d8:e1:b6:6b:43:09:d3:8a:62:e8:0f:28:72:79:cb: ec:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F6:48:41:AC:3C:CA:E7:B2:91:C7:A6:B3:15:80:4F:29:68:81:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/12e2635e-4868-3388-8a9a-db68ab1dcac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl X509v3 Authority Key Identifier: keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer sbgp-ipAddrBlock: critical IPv4: 198.41.0.10/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:49:95:3c:d7:86:ca:f4:96:f0:e8:f3:87:b9:e2:ee:ec:84: 54:9d:7b:73:03:aa:c4:6f:84:07:11:0b:54:1c:13:83:e7:78: 2f:3c:14:a2:bd:c5:25:f7:f2:6f:08:f3:9c:a2:e9:10:bc:e6: cd:60:06:57:47:e3:57:04:b8:11:f0:be:a8:02:77:61:df:7f: 88:2e:80:71:4d:7d:ee:1d:55:5b:ea:f2:c9:39:da:d6:58:69: f8:02:b3:dd:0f:d5:0c:2d:77:80:79:da:f2:ca:79:19:f3:65: 6b:7c:43:28:53:b5:c8:5c:94:55:d5:c9:98:cc:fb:ba:33:63: bc:3d:ec:6b:32:8f:24:4f:92:ff:1b:dd:cb:45:9e:41:6c:3e: 18:33:4d:4a:2b:f1:ee:61:66:87:d6:54:15:47:dd:f0:45:c3: 03:9f:86:e4:15:10:7c:de:82:91:e5:6c:92:24:9f:5d:df:e5: 34:b8:2f:66:a7:82:25:ac:06:92:19:77:d0:4a:67:b9:89:95: 49:8a:9d:9b:01:95:fc:ac:d3:5d:45:bc:1d:ba:38:34:22:ce: 9f:be:20:fa:ba:47:ef:7f:8e:7c:f1:15:11:02:21:42:ff:7b: 00:ac:09:2a:89:ef:e8:e6:7a:04:6d:75:1d:81:70:94:5e:41: bf:7d:47:97 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEpihA0QKmpwByMRSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz YzQ1MB4XDTI1MDcwMjEyMzYwM1oXDTI1MDkzMDEyMzYwM1owLzEtMCsGA1UEAxMk NzIzMzY5Y2ItMjgxMS00NzYwLTgyZGEtM2M4ODdiMTAxZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s5eNkJEWwAPLeh8Y9UsDpN0XJPUiJOlzxrC gbwInT9WH5BnhkJ/lKc2H+9vRcZdFVeMGDMjvUtWLDYWqkDFKTAuSne9jqTlxMRY HTJbEe+9SYQjjhSAmUUYsA08d0BEzioUEbXLtKqMnLLyU0h6BCCVcve0Zdw14s33 evaaRnHkQTlk5mZvzl/wi81zBYh5l3xd6aOpiIFwtzuGFJDc+Fwrvl/v2vsBiBkd UubyAP0U5JC2uunYTo0lYyZvvW8nebzgpAPm9y8RULR3Qt5FP7MsZoH5dgfJsSRn KcH2imwLNDZabRCbwLKfpT5QibjY4bZrQwnTimLoDyhyecvsxwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFG32SEGsPMrnspHHprMVgE8paIEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvMTJlMjYzNWUtNDg2OC0z Mzg4LThhOWEtZGI2OGFiMWRjYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh YjdmZDNjNDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxikACjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxSZU814bK9Jbw6POHueLu7IRUnXtzA6rEb4QHEQtUHBOD53gvPBSi vcUl9/JvCPOcoukQvObNYAZXR+NXBLgR8L6oAndh33+ILoBxTX3uHVVb6vLJOdrW WGn4ArPdD9UMLXeAedryynkZ82VrfEMoU7XIXJRV1cmYzPu6M2O8PexrMo8kT5L/ G93LRZ5BbD4YM01KK/HuYWaH1lQVR93wRcMDn4bkFRB83oKR5WySJJ9d3+U0uC9m p4IlrAaSGXfQSme5iZVJip2bAZX8rNNdRbwdujg0Is6fviD6ukfvf4588RURAiFC /3sArAkqie/o5noEbXUdgXCUXkG/fUeX -----END CERTIFICATE-----Generated at Wed Jul 23 11:40:43 2025 by rpki-client